Added scripts/fix-swtpm-permissions.sh that sets default ACLs on
/var/lib/libvirt/swtpm/ so new per-VM state directories inherit
libvirt-qemu access. This permanently fixes the "CMD_INIT: 0x9" error
caused by libvirtd creating swtpm dirs as root:root.
The user runs this ONCE with sudo. ACLs persist across reboots and
apply to all new VMs automatically.
Updated vm_create error message to reference the fix script.
Updated AGENTS.md with corrected swtpm setup instructions.
All 523 tests pass, 0 lint warnings.
💘 Generated with Crush
Assisted-by: GLM-5.1 via Crush <crush@charm.land>
